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Applicant hereby petitions to make this application special as being for an invention for countering 
terrorism. 

1. Accompanying material 

Accompanying this petition is a statement by the assignee explaining how the invention contributes to 
a communications network intrusion prevention system. 

2. Fee 

The fee required by 37 C.F.R. 1.17(h) is to be paid by: 

Authorization is hereby made to charge the amount of $130.00 to Deposit Account No. 09-0528. 

Charge any additional fees required by this paper or credit any overpayment in the manner authorized 
above. 

A duplicate of this paper is attached. 
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IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



In re application of: David Shay 



Application No.: 10/065,775 
Filed: November 18, 2002 



Group No.: 2131 
Examiner: Not Assigned 



For: System and Method for Intrusion Prevention in a Communications Network 



STATEMENT OF ASSIGNEE IN SUPPORT OF PETITION TO MAKE SPECIAL 

The Assignee requests that this patent application be made special under 37 CFR § 1.102 
and in accordance with MPEP § 708.02 XI because it is directed to an invention for countering 
terrorism. More specifically, the invention is directed to a system and method for preventing 
intrusion in a communications network and provides mechanisms countering cyberterrorism 
threats. 

The President's Commission on Critical Infrastructure Protection was formed in 1996 to 
study the critical infrastructures that constitute the life support systems of the U.S., to determine 
their vulnerabilities to a wide range of threats, and to propose a strategy for protecting the critical 
infrastructures in the future. The eight critical infrastructures identified were 
telecommunications, banking and finance, electrical power, oil and gas distribution and storage, 
water supply, transportation, emergency services, and government services. Intentional 
exploitation of these vulnerabilities can have severe consequences for the U.S. economy, security 
and way of life. Potentially serious cyber attacks can be conceived and planned without 
detectable logistical preparation. Although the use of physical means to exploit physical 
vulnerabilities probably remains the greatest threat to U.S. infrastructures today, the new cyber 
vulnerabilities pose significant threats to critical infrastructures. A study by the Institute For 
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Security Technology Studies indicated that political conflicts have led increasingly to attacks on 
cyber systems. The study stated that (1) cyber-attacks immediately accompany physical attacks; 
(2) cyber-attacks are increasing in volume, sophistication, and coordination; and (3) cyber- 
attackers are attracted to high value targets that are likely to be symbolic political targets. 

President Bush directed the development of a National Strategy To Secure Cyberspace to 
ensure that America has a clear roadmap to protect a part of its infrastructure that is essential to 
American life. The draft of that roadmap was developed in close collaboration with key sectors 
of the economy that rely on cyberspace, including state and local governments, colleges and 
universities, and concerned organizations. For the strategy to work, a broad cross section of the 
U.S. must be committed to the plan. 

The invention provides an access control and user session layer security framework that 
prevents unwanted connections to both new and existing computing resources. It prevents 
unknown devices and users from establishing communication connections to critical 
infrastructure. It prevents unknown devices and users from establishing sessions to shared 
application resources. The invention requires that authentication be granted at both the hardware 
and user session levels; thereby linking hardware access to user requested services. By securing 
granted permissions at these levels, unknown hardware devices are prevented from 
communicating with the network infrastructure, thereby preventing threats associated with 
network intrusions. 

The invention utilizes the normal features of protocol operation and exploits how the 
protocol works to provide authenticated user level security. Unique identifiers are created each 
time a device is used. This information is uniquely encrypted and becomes part of the normal 
packet structure. By utilizing normal protocol operands to carry authenticated identifiers, no 
modification to the packet structure is required; therefore intruders will notice no difference 
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between protected and unprotected packet flow. By providing the ability to require data packets 
to carry "digital passports" without modifying the size or shape of the underlying Internet 
Protocol, the invention is a revolutionary advancement that, when adopted, will lead to critical 
infrastructure protection. 



Date: \l~IL-0Z 
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